Solved

SSH Log on Open Indiana

Posted on 2011-09-20
4
1,290 Views
Last Modified: 2012-05-12
Hello,
I would like to have log of my SSH server on my OpenIndiana. Unfortunatly there is zero auth log in the log file (/var/log/* or /var/adm/*)
So i have edit my /etc/syslog.conf :
#Default 
*.err;kern.notice;auth.notice                   /dev/sysmsg
*.err;kern.debug;daemon.notice;mail.crit        /var/adm/messages
# My add
*.info                                          /var/log/test.info
auth.*  /var/log/authlog.log

Open in new window

and here is my /etc/ssh/sshd_config
# Syslog facility and level
SyslogFacility auth
LogLevel info

Open in new window


I have then restarted the syslog daemon and my ssh server but still no log. No  /var/log/authlog.log and strangly /var/log/test.info , normally all bin sending INFO log should go into that file which is not yet created...I should miss something!
Thanks for help
0
Comment
Question by:numtech
  • 2
4 Comments
 
LVL 6

Assisted Solution

by:Tomunique
Tomunique earned 150 total points
Comment Utility
I can't speak for your OS.  On our system (different flavor of unix), the output file must exist before syslog will write to it.

Try
touch /var/log/test.info

then restart your syslog deamon.
0
 
LVL 22

Accepted Solution

by:
blu earned 350 total points
Comment Utility
You have two problems here, possibly three.

One, as noted above, the file must exist, syslogd will not create it.
Two, "auth.*" is not valid. You can not use an asterisk for the priority, only for the facility. The priority is specified by name, and that name says to log all messages of that priority and higher. So, to log all message priorities, use "debug".
Third, you may not have this problem but it often trips people up.  You cannot use spaces between the entries in the syslog.conf file, only tabs will work. Check to see if you have tabs or spaces.
0
 

Author Comment

by:numtech
Comment Utility
It works!
First, i was using /lib/svc/method/system-log restart which actually dont restart anything! so using
svcadm restart svc:/system/system-log:default works better ;)
i have then remove the auth.* and replace it by auth.debug and created the file by touch.
Thanks again

0
 

Author Closing Comment

by:numtech
Comment Utility
Simple and clear.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

A metadevice consists of one or more devices (slices). It can be expanded by adding slices. Then, it can be grown to fill a larger space while the file system is in use. However, not all UNIX file systems (UFS) can be expanded this way. The conca…
Introduction Regular patching is part of a system administrator's tasks. However, many patches require that the system be in single-user mode before they can be installed. A cluster patch in particular can take quite a while to apply if the machine…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…
In a previous video, we went over how to export a DynamoDB table into Amazon S3.  In this video, we show how to load the export from S3 into a DynamoDB table.

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now